Only the latest minor release line receives security updates:
| Version | Supported |
|---|---|
| 1.8.x | ✅ |
| < 1.8 | ❌ |
Please report security vulnerabilities privately. Do not open a public issue, pull request, or discussion for a vulnerability — that discloses the problem to attackers before a fix is available.
- Report privately: Use GitHub's private vulnerability reporting — "Report a vulnerability" under the repository's Security tab. Include a description, the affected version(s), impact, and reproduction steps if possible.
- Discussion: We'll work with you on the private advisory to confirm the issue and assess its impact.
- Resolution: We'll prepare a fix, release a patched version, and coordinate public disclosure. Reporters are credited unless they ask to remain anonymous.
Your efforts to responsibly disclose your findings are sincerely appreciated.